Privacy policy

This notice explains how GeDy TrAss S.r.l. processes the personal data of visitors to www.gedytrass.com and of people who write to us through the contact form, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.

Data controller

GeDy TrAss S.r.l., Via Vela, 42, 10128 Turin, Italy, VAT IT12088760017. Email: info@gedytrass.com.

What data we process and why

Browsing data

The server hosting the site automatically records some technical data (IP address, date and time, requested page, browser) to keep the site working and secure and to defend it against attacks. The legal basis is our legitimate interest (Art. 6.1.f GDPR). Logs are kept by the hosting provider for as long as strictly needed and no longer than 90 days, unless required to investigate crimes.

Contact form

When you write to us we collect your name, email, company (optional), subject and message, plus your IP address to prevent abuse. We use this data only to answer your request and for any pre-contractual contact that follows. The legal basis is taking steps at your request before entering into a contract (Art. 6.1.b GDPR): this is why the box in the form confirms that you have read this notice rather than collecting consent. Messages are kept for up to 24 months after the last contact, unless a contract follows.

Spam protection (Google reCAPTCHA v3)

To protect the form from automated submissions we use Google reCAPTCHA v3, provided by Google Ireland Limited. It is loaded only when you start filling in the form, and it analyses some information about your device and your interaction with the page. The legal basis is our legitimate interest in the security of the site (Art. 6.1.f GDPR). Data may be transferred to the United States under the EU-US Data Privacy Framework. More information: Google privacy policy.

Analytics (Google Analytics 4)

Only if you accept it in the cookie banner, we use Google Analytics 4 to measure in aggregate how the site is used and how many visits reach the platform at app.gedytrass.com. We do not send Google the content of forms or data that directly identifies you. The legal basis is your consent (Art. 6.1.a GDPR), which you can withdraw at any time from the “Cookie preferences” link at the bottom of every page. The IP address is truncated, Google Signals and ad personalisation are switched off, and data is kept for 14 months. Details are in the cookie policy.

YouTube videos

Videos are embedded in privacy-enhanced mode and are loaded only after your consent. Until then no Google server is contacted.

Who can see the data

Data is processed by authorised GeDy TrAss staff and by providers acting as processors:

• the site’s hosting and email provider, which stores the site, the logs and the form emails;
• digitare.net (Turin), which develops and maintains the site on behalf of GeDy TrAss and can access the systems only for maintenance;
• Google Ireland Limited, for reCAPTCHA, Google Analytics and YouTube, on the terms described above.

We do not sell or give data to third parties for marketing.

Transfers outside the European Union

Google’s services may involve transferring data to the United States. The transfer relies on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, which Google has joined, and on standard contractual clauses. The other providers process data within the European Union.

Security

The site is served only over HTTPS. Form messages reach authorised staff by email and are not stored in a database on the site. To limit repeated submissions the server keeps only a hashed fingerprint of the IP address, for 10 minutes. Service credentials are kept outside the public part of the server.

The app.gedytrass.com platform

This notice covers only www.gedytrass.com. Signing up for and using the platform at app.gedytrass.com are governed by a separate privacy policy and terms and conditions, shown and accepted at sign-up.

Your rights

You can ask at any time for access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest (Arts. 15-22 GDPR), by writing to info@gedytrass.com. If you believe the processing breaks the law you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali.

Providing data

Providing data in the contact form is optional, but without the required fields we cannot answer you. We do not take decisions based solely on automated processing.

Changes

We may update this notice. The date of the last update is shown at the top.